Migrating users/passwords from 11.0 trusted systems to 11iv2??

[Hansel777]

I'm migrating a server from an rp5470 running 11.0 trusted systems to an rx4640 running 11iv2.

Is there any way to move the user and group and password accounts from the old system running trusted systems to the new one??

Is it possible to turn off/disable trusted systems and then move all the files i need?

Thanks for any ideas.

[Arunvijai_4]

Yes, It is possible to turn off Trusted system,
# /usr/lbin/tsconvert -r

you can also do it via # sam
Auditing and Security -> Audited Events -> Actions -> Unconvert the System.

-Arun

[Mel Burslan]

I've never done this myself but copying

/etc/passwd
/etc/group
/tcb/* (recursively with all subdirectories)
and
user home directories

to the new 11iV2 server then running

pwconv

should do the trick for you. Provided this new system is built as or converted to trusted prior to the copy from old server operation. There should not be a need for converting back to untrusted.

[Zigor Buruaga · Accepted solution]

Hi,

If you want to remain trusted in the new server, you can simply do the copy as per Mr. Burslan post.
I've done it several times from 10.20 and 11.00 to 11iv1, so I guess it will work for 11iv2 too. My steps usually are:
First, make a copy of /etc/passwd and /etc/group to ".sav" in the 11iv2 node.
Then, on the 11.00 box, do a tar as:

# tar cvf trusted.tar /etc/passwd /etc/group /tcb

Copy the "trusted.tar" file to the 11iv2 box and then:

# tar xvf trusted.tar

To be on the safe side, have two root sessions opened on the destination server. In case you find any problem, restore the previously saved /etc/passwd and /etc/group, and move /tcb to /tcb.sav

Regards,
Zigor

[Hansel777]

Yes i do want to remain trusted on the new 11iv2 server.

So basically i need to enable trusted on the new server, then tar up the directories on the old server, move them to the new server and then untar it?

[Zigor Buruaga]

Yes, though to be honest, I don't think that converting to trusted before is a necessary step - you are doing it by copying the "/tcb" directory -
Don't forget to save your original files to ".sav", and have several root sessions opened.

Regards,
Zigor

[Hansel777]

thank you for everyone's input it worked.. I didn't convert the new server to trusted systems, and just moved the necessary files over and that was that.

thanks everyone.